Empact-deprec 1.99.21

data/lib/deprec/templates/god/god_thin.erb

@@ -0,0 +1,80 @@
+# == God config file
+# http://god.rubyforge.org/
+# Authors: Gump and michael@glauche.de
+#
+# Config file for god that configures watches for each instance of a thin server for
+# each thin configuration file found in /etc/thin.
+# In order to get it working on Ubuntu, I had to make a change to god as noted at
+# the following blog:
+# http://blog.alexgirard.com/2007/10/25/ruby-one-line-to-save-god/
+#
+require 'yaml'
+
+config_path = "/etc/thin"
+
+Dir[config_path + "/*.yml"].each do |file|
+  config = YAML.load_file(file)
+  num_servers = config["servers"] ||= 1
+
+  (0...num_servers).each do |i|
+    # UNIX socket cluster use number 0 to 2 (for 3 servers)
+    # and tcp cluster use port number 3000 to 3002.
+    number = config['socket'] ? i : (config['port'] + i)
+    
+    God.watch do |w|
+      w.group = "thin-" + File.basename(file, ".yml")
+      w.name = w.group + "-#{number}"
+      
+      w.interval = 30.seconds
+      
+      w.uid = config["user"]
+      w.gid = config["group"]
+      
+      w.start = "thin start -C #{file} -o #{number}"
+      w.start_grace = 10.seconds
+      
+      w.stop = "thin stop -C #{file} -o #{number}"
+      w.stop_grace = 10.seconds
+      
+      w.restart = "thin restart -C #{file} -o #{number}"
+
+      pid_path = config["chdir"] + "/" + config["pid"]
+      ext = File.extname(pid_path)
+
+      w.pid_file = pid_path.gsub(/#{ext}$/, ".#{number}#{ext}")
+      
+      w.behavior(:clean_pid_file)
+
+      w.start_if do |start|
+        start.condition(:process_running) do |c|
+          c.interval = 5.seconds
+          c.running = false
+        end
+      end
+
+      w.restart_if do |restart|
+        restart.condition(:memory_usage) do |c|
+          c.above = 150.megabytes
+          c.times = [3,5] # 3 out of 5 intervals
+        end
+
+        restart.condition(:cpu_usage) do |c|
+          c.above = 50.percent
+          c.times = 5
+        end
+      end
+
+      w.lifecycle do |on|
+        on.condition(:flapping) do |c|
+          c.to_state = [:start, :restart]
+          c.times = 5
+          c.within = 5.minutes
+          c.transition = :unmonitored
+          c.retry_in = 10.minutes
+          c.retry_times = 5
+          c.retry_within = 2.hours
+        end
+      end
+    end
+  end
+end

data/lib/deprec/templates/heartbeat/authkeys.erb

@@ -0,0 +1,2 @@
+auth 1
+1 sha1 <%= heartbeat_auth_key %>

data/lib/deprec/templates/heartbeat/ha.cf.erb

@@ -0,0 +1,15 @@
+# http://linux-ha.org/ha.cf
+logfacility     daemon
+keepalive 1
+deadtime 10
+warntime 5
+initdead 120 # depend on your hardware
+udpport 694
+ping <%= heartbeat_ping %>
+bcast <%= heartbeat_bcast %>
+auto_failback <%= heartbeat_auto_failback %>
+<% heartbeat_nodes.each do |node| -%>
+node    <%= node %>
+<% end -%>
+respawn hacluster /usr/lib/heartbeat/ipfail
+use_logd yes

data/lib/deprec/templates/heartbeat/haresources.erb

@@ -0,0 +1 @@
+<%= heartbeat_preferred_node %> <%= heartbeat_resources %>

data/lib/deprec/templates/iptables/iptables.up.erb

@@ -0,0 +1,41 @@
+*filter
+
+
+#  Allows all loopback (lo0) traffic and drop all traffic to 127/8 that doesn't use lo0
+-A INPUT -i lo -j ACCEPT
+-A INPUT -i ! lo -d 127.0.0.0/8 -j REJECT
+
+
+#  Accepts all established inbound connections
+-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
+
+
+#  Allows all outbound traffic
+#  You can modify this to only allow certain traffic
+-A OUTPUT -j ACCEPT
+
+
+# Allows HTTP and HTTPS connections from anywhere (the normal ports for websites)
+-A INPUT -p tcp --dport 80 -j ACCEPT
+-A INPUT -p tcp --dport 443 -j ACCEPT
+<% port_list.each do |port| %>
+-A INPUT -p tcp --dport <%= port %> -j ACCEPT
+<% end %>
+
+#  Allows SSH connections on the unrecommended default port
+-A INPUT -p tcp -m state --state NEW --dport <%= ssh_port %> -j ACCEPT
+
+
+# Allow ping
+-A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
+
+
+# log iptables denied calls
+-A INPUT -m limit --limit 5/min -j LOG --log-prefix "iptables denied: " --log-level 7
+
+
+# Reject all other inbound - default deny unless explicitly allowed policy
+-A INPUT -j REJECT
+-A FORWARD -j REJECT
+
+COMMIT

data/lib/deprec/templates/logrotate/logrotate.conf.erb

@@ -0,0 +1,32 @@
+# see "man logrotate" for details
+# rotate log files weekly
+weekly
+
+# keep 4 weeks worth of backlogs
+rotate 4
+
+# create new (empty) log files after rotating old ones
+create
+
+# uncomment this if you want your log files compressed
+#compress
+
+# packages drop log rotation information into this directory
+include /etc/logrotate.d
+
+# no packages own wtmp, or btmp -- we'll rotate them here
+/var/log/wtmp {
+    missingok
+    monthly
+    create 0664 root utmp
+    rotate 1
+}
+
+/var/log/btmp {
+    missingok
+    monthly
+    create 0664 root utmp
+    rotate 1
+}
+
+# system-specific logs may be configured here

data/lib/deprec/templates/memcached/memcached-init-script

@@ -0,0 +1,65 @@
+#! /bin/sh
+### BEGIN INIT INFO
+# Provides:             memcached
+# Should-Start:         $local_fs
+# Should-Stop:          $local_fs
+# Default-Start:        2 3 4 5
+# Default-Stop:         0 1 6
+# Short-Description:    memcached - Memory caching daemon
+# Description:          memcached - Memory caching daemon 
+### END INIT INFO
+
+
+PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
+DAEMON=/usr/local/bin/memcached
+DAEMONBOOTSTRAP=/etc/memcached/memcached.conf
+NAME=memcached
+DESC=memcached
+PIDFILE=<%= memcached_pid_file %>
+
+test -x $DAEMON || exit 0
+test -x $DAEMONBOOTSTRAP || exit 0
+
+#PIDFILE=`sed -n 's/-P \(\/\)/\1/p' $DAEMONBOOTSTRAP`
+# Remove comments, then tidy whitespace, then concatenate the lines into one line
+ARGS=`sed 's/\#.*//;/^[ \n]*$/d;' $DAEMONBOOTSTRAP | tr '\012' ' '`
+
+set -e
+
+case "$1" in
+  start)
+	  echo -n "Starting $DESC: "
+	  touch <%= memcached_pid_file %> && chown <%= memcached_user %>:<%= memcached_group %> <%= memcached_pid_file %>
+	  start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON -- $ARGS
+	  echo "$NAME."
+	  ;;
+  stop)
+	  echo -n "Stopping $DESC: "
+	  start-stop-daemon --stop --quiet --oknodo --pidfile $PIDFILE --exec $DAEMON 
+	  echo "$NAME."
+	  rm -f $PIDFILE
+	  ;;
+  stop)
+	  echo -n "Reloading $DESC"
+	  kill -HUP `cat $PIDFILE`
+	  echo "$NAME."
+	  rm -f $PIDFILE
+	  ;;
+
+  restart|force-reload)
+	  echo -n "Restarting $DESC: "
+	  start-stop-daemon --stop --quiet --oknodo --pidfile $PIDFILE
+	  rm -f $PIDFILE
+	  touch <%= memcached_pid_file %> && chown <%= memcached_user %>:<%= memcached_group %> <%= memcached_pid_file %>
+
+	  start-stop-daemon --start --quiet --exec $ARGS
+	  echo "$NAME."
+	  ;;
+  *)
+	  N=/etc/init.d/$NAME
+	  echo "Usage: $N {start|stop|reload|restart|force-reload}" >&2
+	  exit 1
+	  ;;
+esac
+
+exit 0

data/lib/deprec/templates/memcached/memcached.conf.erb

@@ -0,0 +1,46 @@
+# 2003 - Jay Bonci <jaybonci@debian.org>
+# This configuration file is read by the start-memcached script provided as
+# part of the Debian GNU/Linux distribution. 
+
+# Run memcached as a daemon. This command is implied, and is not needed for the
+# daemon to run. See the README.Debian that comes with this package for more
+# information.
+-d
+
+#PID File
+-P <%= memcached_pid_file %>
+
+# Be verbose
+# -v
+
+# Be even more verbose (print client commands as well)
+# -vv
+
+# Start with a cap of 64 megs of memory. It's reasonable, and the daemon default
+# Note that the daemon will grow to this size, but does not start out holding this much
+# memory
+-m <%= memcached_cache_size %>
+
+# Default connection port is 11211
+-p <%= memcached_port %> 
+
+# Run the daemon as root. The start-memcached will default to running as root if no
+# -u command is present in this config file
+-u <%= memcached_user %>
+
+# Specify which IP address to listen on. The default is to listen on all IP addresses
+# This parameter is one of the only security measures that memcached has, so make sure
+# it's listening on a firewalled interface.
+-l <%= memcached_address %>
+
+# Limit the number of simultaneous incoming connections. The daemon default is 1024
+# -c 1024
+
+# Lock down all paged memory. Consult with the README and homepage before you do this
+# -k
+
+# Return error when memory is exhausted (rather than removing items)
+# -M
+
+# Maximize core file limit
+# -r

data/lib/deprec/templates/mongrel/logrotate.conf.erb

@@ -0,0 +1,11 @@
+/var/www/apps/<%= application %>/shared/log/production.log /var/www/apps/<%= application %>/shared/log/mongrel.*.log {
+  daily
+  rotate 14
+  dateext
+  missingok
+  compress
+  sharedscripts
+  copytruncate
+}
+	
+

data/lib/deprec/templates/mongrel/mongrel_cluster-init-script

@@ -0,0 +1,54 @@
+#!/bin/bash
+#
+# Copyright (c) 2007 Bradley Taylor, bradley@railsmachine.com
+#
+# mongrel_cluster       Startup script for Mongrel clusters.
+#
+# chkconfig: - 85 15
+# description: mongrel_cluster manages multiple Mongrel processes for use \
+#              behind a load balancer.
+#              
+
+PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local:/usr/local/sbin:/usr/local/bin
+CONF_DIR=/etc/mongrel_cluster
+PID_DIR=/var/run/mongrel_cluster
+# USER=mongrel
+
+EVENT=1
+
+RETVAL=0
+
+# Gracefully exit if the controller is missing.
+which mongrel_cluster_ctl >/dev/null || exit 0
+
+# Go no further if config directory is missing.
+[ -d "$CONF_DIR" ] || exit 0
+
+case "$1" in
+    start)
+      # Create pid directory
+      mkdir -p $PID_DIR
+      # chown $USER:$USER $PID_DIR
+
+      mongrel_cluster_ctl start --clean -c $CONF_DIR
+      RETVAL=$?
+  ;;
+    stop)
+      mongrel_cluster_ctl stop -c $CONF_DIR
+      RETVAL=$?
+  ;;
+    restart)
+      mongrel_cluster_ctl restart --clean -c $CONF_DIR
+      RETVAL=$?
+  ;;
+    status)
+      mongrel_cluster_ctl status -c $CONF_DIR
+      RETVAL=$?
+  ;;
+    *)
+      echo "Usage: mongrel_cluster {start|stop|restart|status}"
+      exit 1
+  ;;
+esac      
+
+exit $RETVAL

data/lib/deprec/templates/mongrel/mongrel_cluster.logrotate.d

@@ -0,0 +1,14 @@
+/var/log/mongrel/<%= application %>/*.log {
+	daily
+	missingok
+	rotate 28
+	compress
+	notifempty
+	sharedscripts
+	extension gz
+	postrotate
+		for i in `ls /data/<%= @username %>/shared/log/*.pid`; do
+			kill -USR2 `cat $i`
+		done      
+	endscript
+}

data/lib/deprec/templates/mongrel/mongrel_cluster.yml.erb

@@ -0,0 +1,10 @@
+--- 
+user: <%= mongrel_user %>
+group: <%= mongrel_group %>
+cwd: <%= current_path %>
+log_file: <%= mongrel_log_dir %>/mongrel.log
+port: "<%= mongrel_port.to_s %>"
+environment: <%= mongrel_environment %>
+address: <%= mongrel_address %>
+pid_file: <%= mongrel_pid_dir %>/mongrel.pid
+servers: <%= mongrel_servers.to_s %>

data/lib/deprec/templates/mongrel/monit.conf.erb

@@ -0,0 +1,17 @@
+<% mongrel_servers.times do |counter| -%>
+  check process mongrel-<%=mongrel_port+counter%> with pidfile <%= mongrel_pid_dir %>/mongrel.<%=mongrel_port+counter%>.pid
+	group mongrel_<%= application %>
+	start program = "/usr/local/bin/ruby /usr/local/bin/mongrel_rails cluster::start --clean -C <%= mongrel_conf %> --only <%=mongrel_port+counter%>"
+	stop program = "/usr/local/bin/ruby /usr/local/bin/mongrel_rails cluster::stop -C <%= mongrel_conf %> --only <%=mongrel_port+counter%>"
+		
+	if failed host 127.0.0.1 port <%=mongrel_port+counter%> protocol http
+    	with timeout 10 seconds
+    	then alert
+
+	if totalmem > 100 Mb then restart
+	if cpu > 60% for 2 cycles then alert
+	if cpu > 80% for 5 cycles then restart
+	if loadavg(5min) > 10 for 8 cycles then restart
+	if 3 restarts within 5 cycles then timeout
+
+<% end -%>

data/lib/deprec/templates/monit/monit-init-script

@@ -0,0 +1,104 @@
+#!/bin/sh
+# /etc/init.d/monit start and stop monit daemon monitor process.
+# Fredrik Steen, stone@debian.org
+:
+PATH=/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
+DAEMON=/usr/local/bin/monit
+CONFIG="/etc/monitrc"
+NAME=monit
+DESC="daemon monitor"
+
+set -e
+
+# Check if DAEMON binary exist
+test -f $DAEMON || exit 0
+
+ARGS="-c $CONFIG"
+
+monit_not_configured () {
+    echo -e "monit won't be started/stopped\n\tunless it it's configured"
+    if [ "$1" != "stop" ]
+        then
+        echo -e "\tplease configure monit and then edit /etc/default/monit"
+        echo -e "\tand set the \"startup\" variable to 1 in order to allow "
+        echo -e "\tmonit to start"
+    fi
+    exit 0
+}
+
+monit_check_config () {
+    # Check for emtpy config, probably default configfile.
+    if [ "`grep -s -v \"^#\" $CONFIG`" = "" ]; then
+        echo "empty config, please edit $CONFIG."
+        exit 0
+    fi
+}
+
+monit_check_perms () {
+    # Check the permission on configfile. 
+    # The permission must not have more than -rwx------ (0700) permissions.
+   
+    # Skip checking, fix perms instead.
+    /bin/chmod go-rwx $CONFIG
+
+}
+
+monit_delayed_monitoring () {
+    if [ -x $DELAY ]; then
+      $DELAY &
+    elif [ -f $DELAY ]; then
+      echo
+      echo "[WARNING] A delayed start file exists ($DELAY) but it is not executable."
+    fi
+}
+
+monit_check_syntax () {
+  $DAEMON -t;
+#  if [ $? ] ; then
+#      echo "syntax good"
+#  else
+#      echo "syntax bad"
+#  fi
+}
+
+
+monit_checks () {
+    # Check for emtpy configfile
+    monit_check_config
+    # Check permissions of configfile
+    monit_check_perms
+}
+
+case "$1" in
+  start)
+	echo -n "Starting $DESC: "
+    monit_checks $1
+	echo -n "$NAME"
+	start-stop-daemon --start --quiet --pidfile /var/run/$NAME.pid \
+		--exec $DAEMON > /dev/null 2>&1 -- $ARGS
+   monit_delayed_monitoring
+	echo "."
+	;;
+  stop)
+	echo -n "Stopping $DESC: "
+    #monit_checks $1
+	echo -n "$NAME"
+	start-stop-daemon --retry 5 --oknodo --stop --quiet --pidfile /var/run/$NAME.pid \
+		--exec $DAEMON  > /dev/null 2>&1
+	echo "."
+	;;
+  restart|force-reload)
+	$0 stop
+	$0 start
+	;;
+  syntax)
+   monit_check_syntax
+   ;;
+  *)
+	N=/etc/init.d/$NAME
+	echo "Usage: $N {start|stop|restart|force-reload|syntax}" >&2
+	exit 1
+	;;
+esac
+
+exit 0